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Description 



Piracy-resistant data leasing system and 

method. 

Cross Reference to Related Applications 

[0001] This application claims the benefit of U.S. Provisional Ap- 
plication Serial No. 60/481,450, filed Sep. 30, 2003. The 
disclosure of this Provisional Patent Application is incor- 
porated by reference herein in its entirety. 
Background of Invention 

[0002] Ever since the concept of paid-for data access has been 
first implemented, content providers have had to work a 
delicate balance between inconveniencing legitimate users 
by excessive access constraints and implementing a suffi- 
cient number of protective techniques to stop or at least 
to slow down the ever more creative data pirates. 

[0003] For example, one of the major inconveniences of a tradi- 
tional video rental model is the necessity to return a 
rented video or a videogame to the rental outlet on time. 
By demanding a timely return of the rentals, the content 



providers ensure that the duration of the rental period is 
properly enforced (creating a major hassle for their cus- 
tomers in the process). To mitigate the inconvenience re- 
sulting from the necessity to return rented tapes and 
DVDs, a rent-by-mail service is currently offered by Net- 
flix Inc. and WalMart Inc., where a client pays a monthly 
fee for the right to hold several video DVDs. When some 
of the DVDs are mailed back to a warehouse, new rentals 
can be ordered. GameFly Inc. and GamesForRent Inc. offer 
similar rent-by-mail service for videogames. Even though 
the rent-by-mail model has advantages over the tradi- 
tional rental model, it still requires customers to return 
rented material, increasing the overall costs and creating 
the blackout periods during DVDs shipping time. 
[0004] while shipping costs have been steadily growing over the 
years, the prices of digital storage media, such as DVD-R 
disks, have been falling. Eventually it will be more eco- 
nomical to discard the data storage medium after the ex- 
piration of the data rental period than to return the used 
data storage medium to the data provider. There is, how- 
ever, a necessity to come up with a method and a system 
which would allow data providers to enforce the terms of 
the rental agreements without reclaiming the rented data 



storage media. A well researched way of data distribution 
involves a dedicated set-top box which electronically re- 
ceives encoded data from a central location, stores a large 
read-only library of data, or reads data from freely dis- 
tributed data media, such as CDs or DVDs. When a sub- 
scriber selects a data file for usage, the set-top box con- 
tacts the central computer to request the decoding key or 
to process a billing request. In order to mass-customize 
the production of optical disks, a unique code may be 
formed on an optical disk mass-molded from a master 
substrate by removing the reflective coating from selected 
portions of the information recording area to form a code 
pattern. The sophistication of the processing set-top de- 
vice and the general complexity of this method render it 
practically unusable. 
[0005] one way to slow down the piracy, discussed in a number 
of US patents, is to encode data on perishable media. A 
typical perishable medium would have a reactive com- 
pound which changes from an optically transparent state 
to an optically opaque state when subjected to readout 
light and/or atmospheric oxygen, or decays after a certain 
pre-determined time interval. In the alternative embodi- 
ment, an unstable compound temporarily flattens the tex- 



tured surface and enables the optical readout of the data. 
With time the optical transmission through the surface is 
reduced, as the unstable compound is gradually removed 
via sublimation and the texture of the surface is revealed. 
In another variation, a light-changeable compound is in- 
corporated into a section of an optical medium. The com- 
pound temporarily distorts the digital data output from a 
section of the recording layer. As most optical media 
players are pre-programmed to re-sample data areas of 
the recording layer to assure correct copying, the varying 
output from the disclosed optical medium prevents copy- 
ing. The more exotic alternative includes a breakable 
reservoir with chemical agent that interacts with the data 
storage portion to render it unreadable after a specified 
period of time. The concept of perishable data medium, 
while attractive in principle, suffers from several draw- 
backs. In many cases the manufacturing process has to 
take place in the oxygen-free atmosphere, increasing 
costs. The timing of the decay may vary depending on the 
surrounding conditions. For example, while the medium 
may be designed to decay within a certain number of days 
at room temperature, it may decay much slower at lower 
temperatures. A street smart user could simply keep his 



movie library in a freezer, circumventing the intended 
data usage agreement. Alternatively, the media designed 
to decay in laboratory conditions from exposure to oxy- 
gen may stay virtually decay free if intentionally covered 
with a microscopic layer of machine oil which would pre- 
vent atmospheric oxygen from reaching its intended tar- 
get. 

[0006] with the advances in home computer technology, an aver- 
age consumer having an average PC will soon be able to 
make an exact replica of a rented or purchased DVD, con- 
taining a video, videogame or any other video content. As 
such technology becomes widely available, the current 
video distribution model no longer protects the content 
providers from data piracy. A similar problem is already 
evident in the case of the music industry: an audio CD can 
no longer be safely rented (or even sold), since it offers 
virtually no protection against illegal copying. In a re- 
markable show of desperation, the Recording Industry As- 
sociation of America disclosed a method and system of 
marking data media products by introducing a tracing 
substance into a polycarbonate or polystyrene composi- 
tion during the manufacturing stages of CDs or DVDs a 
technique commonly reserved for tracking explosives by 



Government anti-terrorist agencies. Therefore, there is a 
pressing need for new ways to enforce the copyright pro- 
tection of data. 
Summary of Invention 

[0007] | t j S an object of the present invention to provide a new 
data storage medium (DSM) which is particularly con- 
structed for subsequent alteration by a data user or user's 
data rendering system (DRS) to help enforce the restrictive 
covenants of the data usage agreement. 

[0008] a further object of the present invention is to provide a 
new DSM which is relatively easy to manufacture without 
substantial increases in costs. 

[0009] Another object of the present invention is to provide a 
DRS designed to work with the DSM enabled for subse- 
quent alteration. 

[0010] Another object of the present invention is to provide a 
method by which the terms of the data usage agreement 
can be enforced without the necessity to return the DSM 
to a content provider. 

[001 1] yet another object of the present invention is to provide a 
method for data distribution which allows for flexibility in 
choosing the restrictive covenants of the data usage 
agreement. 



[0012] | n the preferred embodiment of the present invention, the 
vital access data is recorded on the part of the DSM tar- 
geted for subsequent alteration by a user or user's DRS. 
The DSM containing the data is then placed into the dedi- 
cated DRS comprising a data reader, an alteration detec- 
tor, a memory cell, and a logic unit. After the access in- 
formation from the part of the DSM subject to subsequent 
alteration is recorded into the system's memory cell, the 
DSM is altered either mechanically, via adding, removing 
or shifting the material, or in any other way detectable by 
the DRS. The alteration can be executed by the DRS itself, 
or alternatively it can be executed manually, by the data 
user. The irreversible alteration of the DSM corrupts the 
access data and renders the DSM unusable by any DRS, 
other than the one which already contains the access in- 
formation in its memory cell. Having confirmed that the 
alteration is complete, the logic unit of the DRS grants the 
user access to the main data on the terms prescribed by 
the data usage agreement. If the usage agreement ex- 
pires, the access data is deleted from the memory cell of 
the DRS rendering the altered DSM inaccessible. 

[0013] These and other objects of the present invention will be- 
come more readily appreciated and understood from a 



consideration of the following detailed description of the 

exemplary embodiments of the present invention when 

taken together with the accompanying drawings. 
Brief Description of Drawings 

[0014] Figures la and lb depict the example of the data storage 
medium (DSM) enabling subsequent mechanical alteration 
via the complete detachment of the part of the DSM. 

[0015] Figures 2a and 2b depict the example of the DSM enabling 
subsequent mechanical alteration via the removal of the 
surface layer from the part of the DSM. 

[0016] Figures 3a and 3b depict the example of the DSM enabling 
subsequent mechanical alteration by adding a permanent 
label to a pre-marked area of the DSM. 

[0017] Figure 4 depicts the example of the DSM enabling subse- 
quent alteration via exposing a data-containing magnetic 
strip to a magnetic or an electromagnetic field. 

[0018] Figure 5 depicts the example of the optical alteration de- 
tector design. 

[0019] Figure 6 depicts the example of the electromechanical al- 
teration detector design. 

[0020] Figure 7 depicts the rendering system (DRS) designed to 
work with the DSM enabled for subsequent alteration. 

[0021] Figure 8 depicts the top-level logic governing the DRS. 



Detailed Description 

[0022] a clear conception of the advantages and features consti- 
tuting the invention, and of the components and opera- 
tion of model systems provided with the invention, will 
become more readily apparent by referring to the exem- 
plary, and therefore non-limiting, embodiments illus- 
trated in the drawings accompanying and forming a part 
of this specification. Descriptions of well known compo- 
nents and processing techniques are omitted so as to not 
unnecessarily obscure the invention in detail. It should be 
further noted that the features illustrated in the drawings 
are not necessarily drawn to scale. The following abbrevi- 
ations are used throughout this text: Data Storage 
Medium (DSM); Data Rendering System (DRS). 

[0023] Figures la and lb provide the example of the DSM en- 
abling subsequent mechanical alteration by a data user. In 
this example, the DSM 100 has a circular shape similar to 
that of a common DVD disk. The DSM 100 may be an op- 
tically readable medium or any other storage medium 
known in the prior art. The data encoded on the DSM 100 
may be audio data, video data, video game, computer 
software, graphical data or any other data. The vital ac- 
cess data is encoded on the inner part 101 of DSM 100. 



The inner part 101 is bound by the perimeter of structural 
weakness 102 running along the circumference concentric 
with the DSM 100. The perimeter of structural weakness 
102 essentially an intentional defect, such as a manufac- 
tured internal crack in the DSM or a perforation line, en- 
ables subsequent alteration of the DSM 100 under the im- 
pact of an external mechanical force. The architecture of 
the sector 101 may optionally include an additional struc- 
tural weakness 103 making it impossible to separate the 
part 101 from the DSM 100 without causing the irrepara- 
ble damage to the detached part 101. Such damage will 
make the detached part 101 to be unreadable by any DRS. 
After the vital access data from the sector 101 is recorded 
into the memory cell of the DRS (not pictured), the user is 
prompted by the DRS to alter the DSM 100. The inner part 
101 of the DSM 100 is then broken off along the line of 
structural weakness 102 under the mechanical force exer- 
cised by a user and discarded. The mechanically altered 
DSM 100, lacking the vital access information previously 
recorded on the detached part 101, is no longer accessi- 
ble by any DRS other than the one containing the missing 
access information in its memory cell. While Figures la 
and lb depict the DSM 100 similar in shape to a common 



DVD disk, the scope of the present invention is not limited 
to any particular geometrical shape of the DSM 100, and / 
or to any particular geometrical shape of the DSM sector 
101 subject to subsequent alteration. For example, in- 
stead of altering the inner portion of the DSM 100, the al- 
teration could be performed on its outer part or any arbi- 
trary part of the DSM 100 having any arbitrary shape. 
[0024] Figures 2a and 2b depict another version of the present 
invention where some of the vital access data is encoded 
on a detachable layer 201 of the disk-shaped DSM 200. 
The detachable label 201 has a shape of the ring concen- 
tric to the DSM 200. When the mechanical alteration of the 
DSM 200 is required, the user simply peels off the layer of 
the material 201 along with some of the access data en- 
coded on it to reveal the underlying substrate 202 which 
may be blank, may have a specific texture recognizable by 
the DRS (not pictured), or may in turn contain data. In the 
case when the DSM is similar to a common CD or DVD 
disk, the detachable layer 201 can be made of a polymer 
having a data-containing metallic layer. The substrate 202 
can be made of polycarbonate or other materials known to 
those skilled in the art. Once again, the altered DSM 200 
is accessible only by the DRS having the missing access 



information in its memory cell. The case when the under- 
lying substrate 202 in turn contains data deserves special 
recognition, since the physical inability of any data reader 
to access the underlying data until the detachable label 
201 is lifted adds an additional degree of protection. The 
scope of the present invention is not limited to any partic- 
ular geometrical shape of the DSM 200, or to any particu- 
lar geometrical shape of the removable layer 201. 

[0025] Figures 3a and 3b depict yet another version of the 

present invention, wherein the DSM 300 is mechanically 
altered by adding the material to it. The label 301 having 
a particular texture recognizable by the DRS (not pictured) 
can be permanently affixed to the specified area 302 of 
the DSM 300, irreversibly blocking some of the data en- 
coded on the DSM 300. 

[0026] | n y e t another version of the present invention, the layers 
of the data storage medium can be irreversibly shifted 
with respect to each other, permanently changing the lay- 
out of the encoded data. The scope of the present inven- 
tion is not limited to any particular variety of mechanical 
alteration of the DSM. All the mechanical alterations of the 
data storage medium via adding, removing or shifting 
material are covered by the scope of the present inven- 



tion. 

[0027] Further, the scope of the present invention is not limited 
to any type of the DSM alteration. Any alteration of the 
DSM which can be reliably detected and confirmed by the 
dedicated DRS is covered by the scope of the present in- 
vention. For example the DSM may be altered by applying 
a thermal, magnetic or electromagnetic field, by exposing 
the DSM to a chemical or exposing it to light, by changing 
one or more physical properties of at least some of the 
composing material. Figure 4 provides an example of the 
DSM 400 enabling subsequent alteration by a magnetic or 
an electro-magnetic field, wherein a outer ring-shaped 
sector of the DSM 400 is a magnetic strip 401 containing 
vital access data. After the access data is retrieved by the 
magnetic data reader 402, it is erased by exposing the 
magnetic strip 401 to the magnetic or electromagnetic 
field supplied through the erasing device 403. Alterna- 
tively, the alteration may be conducted manually via ex- 
posing the magnetic strip 401 to a strong fixed-pole 
magnet (not pictured). Figure 4 depicts the case of the in- 
ternal alteration by the DRS itself, wherein the magnetic 
reader 402 and magnetic eraser are two separate devices. 
In the alternative embodiment the reader 402 and the 



erasing device 403 may be combined in a single read/ 
right magnetic head. The DRS, having confirmed that the 
access data on the magnetic strip 401 is permanently 
erased, grants the user access to the main data encoded 
on the DSM 400 according to the terms of the data usage 
agreement. While the scope of the present invention is not 
limited to any particular type of the main data encoding, 
in this particular embodiment it is preferable that the en- 
coded main data is not sensitive to the magnetic or elec- 
tromagnetic field generated to erase the access data on 
the magnetic strip 401. For example, if the main data is 
encoded using optical means, it will not be adversely im- 
pacted when the erasing magnetic field is applied to the 
sector 401. 

[0028] FIG. 5 provides an example of the alteration detection de- 
sign using optical means. Similar to the process described 
in the Figures 2a and 2b, the alteration of the disk-shaped 
DSM 500 is performed via peeling off the detachable layer 
501 containing vital data. The underlying substrate of the 
DSM 500 has a sequence of transmitting apertures 502 
arranged along the exposed area of the substrate. The 
light beam emitted by the light source 503 falls on the 
substrate of the DSM 500. As the DSM 500 rotates around 



its center, the light beam periodically passes through the 
apertures 502 onto optical detector 504. The detector 504 
registers a time dependent periodic pattern of signals 
consistent with the pattern of the apertures 502. This time 
dependent signal is delivered along the line 505 as a con- 
firmation that the alteration of the DSM has been exe- 
cuted. Alternatively, the transmitting apertures 502 may 
be substituted by a similar set of the reflective spots. In 
this case the incident light will be periodically reflected to 
the optical detector located on the same side as the light 
source with respect to the plane of the DSM 500. If the 
data storage medium is an optically readable medium, the 
light source 503 could be a part of an optical data reader. 
[0029] Figures 6a and 6b provide another example of the alter- 
ation detection mechanism. In this example, the DSM 600 
is a disk similar to a common CD or a DVD. The alteration 
is accomplished by removing the inner part 601 of the 
disk, similar to the process described on the Figures la 
and lb. A small wheel 604 is situated of the tip of a but- 
ton 603 of a pushbutton electric switch 602, mounted in 
the vicinity of the DSM 600. The wheel 604 rolls along the 
surface of the DSM 600 with a minimal friction. The switch 
602 is connected in series to the power supply 605 and 



the alteration signal generator 606 by the conducting 
wires 607. When the DSM 600 is not altered (Figure 6a), 
the button 603 of the pushbutton switch 602 is pressed 
against the DSM 600, resulting in the switch 602 being in 
OFF position. The electric circuit is incomplete and the al- 
teration signal is negative. After the alteration is complete 
(Figure 6b), the DSM 600 is no longer pressing on the 
button 603 of the pushbutton switch 602 and the switch 
602 changes to ON position, completing the electric cir- 
cuit. The circuit returns positive alteration signal. In a 
more general alternative of the present alteration detec- 
tion mechanism, a circuit breaker combination 602, 603 
and 604 may be substituted by any contact sensitive cir- 
cuit breaker known in the current art. 

[0030] | n general, the scope of the invention is not limited to any 
particular design of the alteration detector. The exact 
composition and the mechanism of the alteration detec- 
tion is strongly dependent on the alteration type utilized 
in a particular embodiment and can be easily constructed 
by a person skilled in the art. 

[0031] FIG. 7 is a block diagram illustrating the comprehensive 
embodiment of the DRS 799 designed to work with the 
DSM enabled for subsequent alteration. In the preferred 



embodiment, the block 700 represents the DSM wherein 
some the data access information is encoded on its sector 
701 subject to subsequent alteration. The DSM may be 
selected from a plurality consisting of CDs, DVDs, tapes, 
laser disks, Zip Disks, Micro Disks, MiniDiscs, flash mem- 
ory and any other medium known in the current art. The 
alteration detector 702 of the DRS 799 determines the al- 
teration status of the sector 701 and sends the alteration 
status signal along the line 703 to the logic unit 704. The 
specific design of the alteration detector 702 depends on 
the type of DSM alteration used. While several alteration 
detector designs are offered in this patent application, 
other designs may be easily constructed by a reader 
skilled in the art. The logic unit 704 is preferably a dedi- 
cated microchip built into the DRS 799. Alternatively, a 
separate computer running dedicated software may be 
plugged into the DRS 799 to serve as a logic unit 704. If 
the alteration signal from the alteration detector 702 is 
negative (indicating that the alteration of the DSM 700 has 
not been done yet), the logic unit 704 sends a command 
along the line 705 to the data reader 706 to retrieve the 
access information from the sector 701. The data reader 
706 is chosen to match the type of DSM used. The data 



reader 706 retrieves the information from the sector 701 
and sends the retrieved information along the line 707 
into the memory cell 708. The memory cell 708 should al- 
low for dynamic access and should be temper-proof. Hav- 
ing received the confirmation along the line 709 that the 
information from the sector 701 has been stored in the 
memory cell 708, the logic unit 704 sends the alteration 
request via the line 710 to the message display 711. The 
message display 711 may comprise a series of light emit- 
ting sources, any other state-changing indicators, or a 
text or graphics display. The DSM is then ejected by the 
DRS 799 and the manual alteration of the sector 701 of 
the DSM 700 is performed by the data user. Optionally, 
the DRS 799 may be designed to perform the alteration 
internally. In this case, the alteration request is sent from 
the logic unit 704 along the line 712 to the alteration de- 
vice 713. The alteration device 713 then alters the sector 
701 of the DSM 700. When the alteration signal from the 
alteration detector 702 along the line 703 turns positive 
(indicating that the alteration has been completed), the 
logic unit 704 sends the command along the line 705 to 
the data reader 706 to retrieve the main content from the 
DSM 700 to the decryption / decompression unit 714 



along the line 715. Simultaneously, the logic unit 704 
sends a command along the line 709 to the memory cell 
708 to send the previously recorded access information 
for this particular DSM 700 along the line 716 to the de- 
cryption / decompression unit 714. The decryption / de- 
compression unit 714 may use the data encryption engine 
based on any commercially available encryption technique 
known to a user skilled in the art. The data compression 
may be based upon a standard engine, such as MPEG 
technology for the case of video data, or it may be based 
upon a proprietary algorithm to further discourage unau- 
thorized copying. After being decoded and decompressed 
by the decryption / decompression unit 714, using the 
access code provided from the memory cell 708, the pro- 
cessed data is sent to the data output terminal 717 along 
the line 718. 

[0032] Optionally the data usage agreement may contain further 
restrictive covenants such as the duration of the autho- 
rized data access. In this case an additional step is per- 
formed retrieving the time dependent signal from a tam- 
per-proof time-counter 719 along the line 720 to the 
logic unit 704 and comparing it with the authorized ac- 
cess interval, denying access to the main data unless the 



complete match occurs. If other restrictive covenants are 
implemented, the time counter 719 may be replaced or 
supplemented by a relevant sensor or a measuring appa- 
ratus. For example, the data usage agreement could re- 
strict the data access to a particular DRS. In this case the 
parameter generator 719 may comprise a device generat- 
ing a signal uniquely identifying the specific DRS. This 
identification code is then sent to a logic unit 704 for a 
comparative test against the code written into the DSM 
access data. In another alternative, the data usage agree- 
ment may limit the number of times the data can be ac- 
cessed. For example, if the main data is a scenario-based 
video game or a scholar test, the user may be licensed to 
run the scenario only a specific number of times. In this 
case, the parameter generator 719 will generate the infor- 
mation about the prior usage history of the particular DSM 
and update the usage information when the access to this 
DSM is granted. The examples above illustrate that the 
present invention offers high degree of flexibility with re- 
spect to various possible data usage constraints. 
[0033] The scope of present invention is not limited by the choice 
of any particular component functioning in the way pre- 
scribed by FIG. 7. Irrespective of any technical variations 



utilized by a person skilled in the art, the key novel fea- 
ture of the DRS described in the present invention is that 
it will not grant the access to the main data unless the ac- 
cess information from the subsequently altered data stor- 
age sector exists in the memory cell and the required irre- 
versible alteration of the DSM is detected by the system. 
[0034] FIG. 8 provides a flow diagram of the top-level logic gov- 
erning the DRS. Upon the Start 800, the query 801 is 
made to determine whether the DSM is placed in the DRS. 
If the DSM is not present in the DRS, the request to place 
the DSM is generated, step 802. Then the query 801 is re- 
peated. When the DSM is present in the DRS (answer yes 
to the query 801), the process 803 is performed conduct- 
ing the alteration test of the DSM and sending the alter- 
ation result to the query 804. The query 804 checks 
whether the DSM has been altered. If DSM alteration has 
not been detected, (answer no to the query 804), the ac- 
cess information from the sector of the DSM targeted for 
alteration is recorded into the memory cell, step 805. The 
access information may contain an encryption key or a 
password necessary for later data decryption. Then the 
request to alter the DSM is generated, step 806. The sys- 
tem ejects the DSM via process 807 and prompts for a 



new DSM to be inserted via step 802. If the DSM has been 
altered (answer yes to the query 804), the access informa- 
tion is requested from the memory cell of the DRS, step 
808. The query 809 checks whether the access informa- 
tion for this particular DSM has been previously recorded 
into the memory cell of the DRS. If the answer to the query 
809 is no, the system displays Access Denied via the pro- 
cess 810, ejects the DSM via the process 807, and dis- 
plays Insert DSM via the process 802, prompting for a 
next DSM. If the data usage agreement contains additional 
restrictive covenants recorded either into the memory cell 
or on the DSM itself, and if the answer to the query 809 is 
yes, the information necessary to test the restrictive 
covenants of the usage agreement is retrieved from the 
parameter generator, such as temper-proof time counter, 
via the process 811. Upon the execution of the process 
811, the query 813 is executed where the restrictive 
covenants of the data usage agreement are tested against 
the parameters retrieved via the process 811. If the re- 
strictive covenants of the lease do not match the parame- 
ters retrieved via 811 (answer no to the query 813), the 
system displays Access Denied via step 810, ejects the 
DSM via the process 807, and displays Insert DSM via the 



process 802, prompting for a next DSM. Upon the positive 
answer to the query 813, the process 815 retrieving the 
main data file is executed, and the retrieved main content 
is sent for decryption / decompression using the encryp- 
tion key previously recovered from the memory cell via 
step 816. Upon the completion of the decryption / de- 
compression, the End 899 is reached. If the data usage 
agreement limits the number of times the data can be ac- 
cessed, the additional steps 812 and 814 are performed, 
retrieving the prior usage history for a particular DSM be- 
fore executing the query 813 and updating the usage his- 
tory when the answer to the query 813 is positive. If there 
is no limitation on the number of times the data may be 
accessed, the additional steps 812 and 814 are not 
present. Similarly, if no lease restrictive covenants are to 
be checked, the optional step 811 and query 813 are 
omitted and the positive outcome of query 809 is followed 
directly by the step 815. 
[0035] while FIG. 8 describes a case when an alteration-ready 

DSM is to be used by only one DRS, simple modification of 
the governing logic can be made for the case of multiple 
data rendering systems. For example, a user may require 
an alteration-ready DVD to be recognized by multiple 



DVD players located in different rooms of his house. In 
this case, an alteration-ready DSM should be introduced 
to each DRS (via steps 800 through 807) before being al- 
tered. Later, each DRS will be able to recognize the altered 
DSM since its vital access information is stored in the 
memory cell of each system. 

[0036] | n the alternative version of the present invention, the ac- 
cess to main content may simply be impossible prior to 
the DSM alteration because of a specific geometric design. 
An example of such design was provided in the descrip- 
tion of FIG. 2a and FIG. 2b, where some of the content was 
hidden by a data bearing detachable layer. This alternative 
configuration supplements functionality of some of the 
system components and is covered by the scope of the 
present invention. In another design variation, at least 
some functionality of the logic unit may be assumed by 
other DRS components. Such re-assignment of logical 
functionality is covered by the scope of present invention. 

[0037] The backward compatibility is an important requirement 
for any new system and method to be broadly adopted. 
Therefore, it is preferable for the DRS described above to 
be compatible not only with the alteration-ready storage 
media but also with the prior similar storage media, not 



requiring alteration. For example, the DRS designed to 
work with alteration-ready DVDs should be made to rec- 
ognize common DVDs from user's personal video library. 
In this case, an additional query (not pictured on FIG. 8) 
may be conducted to determine whether the media is al- 
teration-ready or it is a similar plain-vanilla analog. In the 
case when the DRS described on FIG. 7 and FIG. 8 recog- 
nizes an older unprotected DSM, the data is retrieved di- 
rectly without any further tests. 

[0038] on the other side, the recognition of the alteration-ready 
DSM by other systems, not specifically designed for alter- 
ation-ready DSM and not equipped with the temper-proof 
components, may encourage undesirable data tempering. 
Therefore, it may be advantageous for alteration-ready 
DSM to be non-compatible, both before and after alter- 
ation, with a DRS designed to work only with plain vanilla 
analog of an alteration-ready DSM. Such incompatibility 
may be achieved by subtle differences in media geometry 
or by using different data encoding standards. 

[0039] Another important aspect is the legitimate lateral compat- 
ibility. A newly acquired alteration-ready DRS preferably 
should be compatible to the existing library of the alter- 
ation-ready DSM. To solve this problem, a temper-proof 



memory cell of the alteration-ready DRS could be a stand- 
alone plug-in module, similar to a memory card. In this 
case the user can simply take the memory cell module out 
of his existing alteration-ready DRS and plug it into in a 
newly purchased alteration-ready DRS. To reduce the po- 
tential for abuse introduced by such modular construction 
of the memory cell, one may implement a proprietary 
standard for either memory plug configuration or memory 
encoding, or both. 
[0040] All the disclosed embodiments of the invention described 
herein can be realized and practiced without undue ex- 
perimentation. Although the best modes of carrying out 
the invention contemplated by the inventor are disclosed 
above, practice of the invention is not limited thereto. Ac- 
cordingly, it will be appreciated by those skilled in the art 
that the invention may be practiced otherwise than as 
specifically described herein. For example, the individual 
components need not be formed in the disclosed shapes, 
or assembled in the disclosed configuration, but could be 
provided in virtually any shape, and assembled in virtually 
any configuration. Further, the individual components 
need not be fabricated from the disclosed materials, but 
could be fabricated from virtually any suitable materials. 



Furthermore, all the disclosed elements and features of 
each disclosed embodiment can be combined with, or 
substituted for, the disclosed elements and features of 
every other disclosed embodiment except where such ele- 
ments or features are mutually exclusive. It will be mani- 
fest that various additions, modifications and rearrange- 
ments of the features of the invention may be made with- 
out deviating from the spirit and scope of the underlying 
inventive concept. It is intended that the scope of the in- 
vention as defined by the appended claims and their 
equivalents cover all such additions, modifications, and 
rearrangements. 



